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(57) Abstract: Disclosed is an apparatus for searching 
through one or more databases (201, 203, 205). The apparatus 
includes at least one hard wired search engine (904) arranged 
to receive the key and one or more programmable search 
parameters and to search through the data base for an address 
entry corresponding to the received key. The search is 
alterable by the programmable search parameters. Methods for 
searching through multiple data bases (100) are also disclosed. 
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Search Algorithm Methods and Apparatus 

Background of the Invention 

The present invention relates generally to search algorithms and data base 
structures that are suitable for such search algorithms. More particularly, the search 
algorithms and data base structures of the present invention may be implemented 
within a packet interface device. 

Several types of data base structures are available today for storing large 
amounts of digital information. Accordingly, a large number of search algorithms 
have been developed to search the many types data base structures. Typically, a data 
base will include data entries, and each data entry is associated with an address entry 
that is associated with a key. The search algorithm is used to search the data base for 
a particular key. That is, a key is input into a search algorithm; the search algorithm 
matches the input key to a corresponding address entry within the data base; and the 
data entry corresponding to the matched address entry is output as the result of the 
search. 

There are several different types of data base structures and corresponding 
search algorithms. For example, a binary search algorithm may be used to search the 
data base, and is well known to those skilled in the art. When a binary search is 
implemented, the data base address entries must be arranged to facilitate a binary 
search. That is, at least some of the address entries must have a link to a higher value 
address entry and a link to a lower value address entry. Thus, when a key is compared 
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to a particular address entry and there is no match, the search algorithm may continue 
the search by going to the higher or lower value address entry, depending on whether 
the key has a higher or lower value than the current address entry. 

Although conventional search algorithms and data base structures work well 
5 for certain applications, they are not adequate for other applications. For example, 
when data is streaming through a data processing device, the search algorithm 
implemented by such processing device must perform required searches on the stream 
data at a rate that is at least as fast as the data rate. In certain packet switching 
systems, data flow rates are reaching tens of gigabits per second. Software based 
10 search algorithms typically cannot keep up with these flow rate speeds. 

Thus, some switching device designers have developed hardware based search 
algorithms. Hardware search algorithms are custom designed circuits that perform a 
particular type of search algorithm. However, these hardware based search algorithms 
lack run time flexibility. In other words, the algorithm cannot be changed on a packet 
15 by packet basis. Many of these hardware based algorithms cannot even be statically 
changed, e.g., not during run time. 

In view of the foregoing, there is a need for improved data base structures and 
search methods that provide greater efficiency without sacrificing flexibility. 
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Summary of the Invention 

Broadly speaking, the present invention fills these needs by providing a search 
apparatus that implements a set of search algorithms and data base types. The search 
apparatus receives one or more programmable parameters for selecting a particular 
5 search algorithm, how it is implemented, and a particular data base type. 

In an apparatus aspect of the invention, the set of algorithms are implemented 
by hardwired devices, such as state machines, that receive programmable parameters 
for selecting and/or modifying an algorithm. The advantage of hardwired devices is 
the speed, and the advantage of parameter based algorithm selection is flexibility. 
10 Also, it appears that there is significant 'Uime slacIC' available in hard wired devices 
so that it is possible to parameterize them without significantly affecting performance. 
In one embodiment, this parameterization is controlled by micro code, and one gets 
the best of both worlds (performance, as well flexibility). 

In a specific embodiment, an apparatus is disclosed that includes a master 
15 machine (referred to as micro engine) that is micro code based and a slave machine 
(referred to as macro engine) that consists of a set of state machines, each of which 
specializes in doing a particular type of search. The micro engine provides full 
flexibility of application specific searches, while the macro engine provides high 
performance for well defined applications. In another preferred embodiment, the 
20 macro engine also allows significant programmable parameterization, which is 
controlled by the micro engine. 

In one embodiment, an apparatus for searching through a database is 

3 
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disclosed. The apparatus includes at least one hard wired search engine arranged to 
receive the key and a programmable search parameter and to search through the data 
base for an address entry corresponding to the received key. The search is alterable 
by the programmable search parameter. 

5 In an alternative embodiment, the apparatus includes a plurality of hard wired 

search engines arranged to perform one of a plurality of search algorithms for 
searching through a data base for a key. At least one of the search algorithms are 
alterable by the programmable search parameter. The apparatus further includes a key 
decoder arranged to receive the key and the programmable search parameter and to 
10 selectably output the key to one of the search engines based on the programmable 
search parameter or the key. 

In another embodiment, the hard wired search engine is operable to search a 
plurality of data bases that each have a plurality of linked address groups that each 
have a plurality of address entries and a plurality of data entries that each correspond 

15 to a selected address entry. The search engine is arranged to sequentially compare a 
key to the address entries of a current address group and obtain a data entry 
corresponding to the address entry that matches the key. The obtained data entry is 
related to the key, and the search engine is also arranged to compare the key to the 
address entries of a next address group when the key does not match any of the 

20 address entries of the current address group. 

In another embodiment, the search engine is operable to search the plurality of 

data bases even when each data base has a different number of address groups. In yet 

another aspect, the search engine is operable to search the plurality of data bases even 

4 
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when each data base has a different number of address entries per address group. 

In another embodiment, the plurality of data bases each further include a 
plurality of anchors that each reference a selected one of the address groups and the 
search engine is operable to obtain a first address group through a selected anchor. In 
5 a preferred embodiment, the anchor corresponds to a portion of the key. In another 
embodiment, the search engine is operable to search the plurality of data bases even 
when each data base has differently sized anchors or each of the anchors has either a 
16 bit or 32 bit size. 

In another aspect, an apparatus for searching through a database to compare 
10 received keys to a plurality of address entries is disclosed. Each address entry has a 
corresponding data entry. The apparatus includes a first state machine arranged to 
perform a first search of a first search type and a second state machine arranged to 
perform a second search of a second search type. The apparatus fiirther includes a key 
decoder arranged to receive a key and a plurality of programmable search parameters 
15 and to selectably output the key to one of the state machines based on the 
programmable search parameters and/or the received key. The search performed by 
the selected state machine is based at least in part on the progranmiable search 
parameters. 

In an alternative embodiment, the first search type is selected from a group 

20 consisting of a linked list search, a ranged based search, and a longest prefix search. 

In yet another embodiment, the second search type is selected from a group consisting 

of a linked list search, a ranged based search, and a longest prefix search, wherein the 

first search type differs from the second search type. 

5 
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In another aspect, the invention pertains to a data base that includes a plurality 
of linked address groups that each have a plurality of address entries and a plurality of 
anchors that each reference a selected one of the address groups. The data base also 
includes a plurality of data entries that each correspond to a selected address entry. 
5 When a key matches a selected one of the address entries, a data entry corresponding 
to the matched address entry may be obtained. The data entry is related to the key. 

In another aspect, the invention pertains to a method for searching through an 
address entry database for one or more portions of a key. The address entry group 
database includes a plurality of address entry groups each having a plurality of 

10 address entries. A current address group is searched for a current address entry that 
matches a current slice of a key. When a current address entry that matches the 
current slice is not found within the current address group, it is indicated that there is 
not a match. When a current address entry that matches the current slice is found 
within the current address group, a next address group associated with the current 

15 address entry of the current address group is searched for a next address entry that 
matches a next slice of the key when the next address group is valid. When a next 
address entry that matches the next slice is not found within the next address group 
after searching the next address group, it is indicated that there is a match 
corresponding to the current address entry. Each of the address groups have an 

20 associated current match length current indicating what length of the key must match 
the corresponding address entry, and a first address entry has a first current match 
length that differs from a second current match length of a second address entry. 

In another embodiment, the invention pertains to a databsise configured for a 



wo 01/20501 PCTAJSOO/07416 
longest prefix search for a received key. The data base includes a plurality of linked 
address groups each having a plurality of address entries. Each address entry includes 
a match pattern that is comparable to a corresponding slice of the received key, a 
current match length that indicates how many bits of the corresponding key slice must 
5 match the match length, and a next group pointer. The data base also includes a 
plurality of data entries each associated with one of the address entries. 

These and other features and advantages of the present invention will be 
presented in more detail in the following specification of the invention and the 
accompanying figures vAuoh illustrate by way of example the principles of the 
10 invention. 
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Brief Description of the Drawings 

The present invention will be readily understood by the following detailed 
description in conjunction with the accompanying drawings, wherein like reference 
numerals designate like structural elements, and in which: 

5 Figure 1 is a flowchart illustrating a process for searching one or more 

databases in accordance with one embodiment of the present invention. 

Figure 2 is a diagranmiatic representation of a database in accordance with one 
embodiment of the present invention. 

Figure 3 is a diagranmiatic representation of an address entry group that may 
10 be utilized for a linked list search in accordance with one embodiment of the present 
invention. 

Figure 4 is a flowchart illustratmg a Imked list search in accordance with one 
embodiment of the present invention. 

Figure 5 is a diagrammatic representation of an altemative address entry group 
15 that may be utilized for a range based search in accordance with one embodiment of 
the present invention. 

Figure 6 is an illustration of possible communication paths within a network 
system in accordance with one embodiment of the present invention. 

Figure 7 is a diagrammatic representation of an altemative address entry group 
20 that may be utilized for a longest prefix search in accordance with one embodiment of 

8 
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the present invention. 

Figure 8 is a flowchart of a longest prefix search in accordance with one 
embodiment of the present invention. 

Figure 9 is a diagranmiatic representation of a search engine for implementing 
5 the search algorithms of the present invention in accordance with one embodiment. 

Figure 10 is an example implementation of the macro search engine of Figure 
9 in accordance with one embodiment of the present invention. 

Figure 1 1 represents a state machine that implements the key decoder and 
latch of Figure 10 in accordance with one embodiment of the present invention. 

10 Figure 12 represents a state machine that implements the linked list block of 

Figure 10 in accordance with one embodiment of the present invention. 

Figure 13 represents a state machine that implements the memory arbitrator of 
Figure 10 in accordance with one embodiment of the present invention. 

Figures 14A and 14B represent a state machine that implements the range 
15 based block of Figure 10 in accordance v^th one embodiment of the present 
invention. 

Figure 15 represents a state machine that implements the longest prefix block 
of Figure 10 in accordance with one embodiment of the present invention. 
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Detailed Description of Specific Embodiments 

Reference will now be made in detail to specific embodiments of the 
invention. While the invention will be described in conjunction with specific 
embodiments, it will be understood that it is not intended to limit the invention to the 

5 described embodiments. On the contrary, it is intended to cover alternatives, 
modifications, and equivalents as may be included within the spirit and scope of the 
invention as defined by the appended claims. In the following description, numerous 
specific details are set forth in order to provide a thorough understanding of the 
present invention. The present invention may be practiced without some or all of 

10 these specific details. In other instances, well known process operations have not 
been described in detail in order not to unnecessarily obscure the present invention. 

Figure 1 is a flowchart illustrating a process 100 for searching one or more 
databases in accordance with one embodiment of the present invention. Initially, a 
key and its associated parameters are received in operation 102. One or more search 
15 algorithm(s) are then selected for the received keys based on the associated 
parameters in operation 104. In one embodiment, one or more specific search 
algorithm(s) may be selected from a set of search algorithms. At least one of these 
search algorithms may be implemented by one or more hard wired search engines 
having programmable search parameters. 

20 In operation 106, the selected search algorithm(s) are then performed on the 

received key based on the associated parameters. That is, particular aspects of the 
selected search algorithm(s) are configurable based on the associated parameters. 



wo 01/20501 PCT/US00/074I6 
Said in another way, a first set of parameters will result in a selected search algorithm 
being performed in a first way, and a second of parameters will result in a selected 
search algorithm being performed in a second way. The search process 100 then ends. 

The search engines of the present invention may perform searches within 
5 various types of data bases. For example, the search engines may implement a first 
search algorithm on a first type of data base and a second search algorithm on a 
second data base. Additionally, for each type of search algorithm, the search engines 
may utilize a single data base or a plurality of data bases. By way of a final example, 
the search engines may utilize various configurations of a same type of data base {e.g.. 
10 linked list data base) for a particular type of search algorithm. 

Figure 2 is a diagranunatic representation of a database 200 in accordance 
with one embodiment of the present invention. The database includes an anchor 
database 201, an address entry database 203, and a data entry database 205. The 
anchor database 201 includes a list of pointers 207. Each pointer 207 of the anchor 
15 database 201 references a particular group of address entries 210 within the address 
entry database 203. The anchor gives a starting place for the search algorithm. That 
is, each anchor references a first address group of a linked list to be searched. 

Each address group contains a plurality of address entries. An individual 

address entry within an address entry group 210 references a particular data entry (e.g. 

20 via pointer 209) within data entry database 205. An address entry is typically 

compared to one or more portions of the received key. When a match occurs between 

a particular address entry and the received key, the referenced data entry may be 

retrieved via pointer 209 fi'om data entry database 205. 

11 
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The data entry is in any suitable format for storing information for later 
retrieval by a search algorithm. For example, within the context of a network system 
for transmitting data packets, the data entry may include information for the routing of 
data packets. By way of specific example, the data entry may include a destination, 
5 quality of service (QOS) information, and/or authentication parameters. 

The address entry generally functions as an index to a particular data entry. 
For example, the address entry may correspond to a particular format of destination 
address that is compared to the received key. In other words, a particular destination 
address having a first format is received as part of the key, and is matched to a 
10 corresponding address entry having the same first format. The corresponding address 
entry is then used to fetch an associated data entry that represents the destination 
address in a second format. 

The received key may have any suitable structure for facilitating a search. For 

example, the received key may include one or more portions that may be compared to 

15 one or more address entries. The received key may also include any suitable 

parameters (which are also referred to as "key attributes") for controlling how the 

search is performed. In one embodiment, the received key structure includes the 

following bits: 

key type 4 bits 

20 sub key type 4 bits 

key value size depends on key type & subtype 

initial address value 24 bits 

key attributes 24 bits 

key mask size depends on key type & subtype 

25 initial address base 24 bits 

data entry base 24 bits 

address entry base 24 bits 

12 



wo 01/20501 PCT/USOO/0741 6 

Table 1 

The key type defines the type of data base to be searched (e.g.. linked list or 
range based data base). The sub key type may be used to further define the type of 
data base. For example, the sub key type may specify one or more data bases from a 
5 plurality of linked list data bases. Additionally the sub key type may also specify 
whether the maximum size of the key value is one or two memory words (e.g., 64 or 
128 bits in length). The key value is the field that is compared to address entries. 
(The key value is also referred to as the "key"). The key value's size depends on the 
particular database being used. Thus, the key value's size depends on the key type 
10 and key subtype. 

The initial address value may include a hashed value or any other portion of 
the key or database, including a constant value. The key attributes (also referred to as 
key parameters) includes other programmable fields that are selectable to control how 
the search is implemented or how the data base is structured. Example key attributes 
15 are further described below with reference to the descriptions of the three described 
search types: linked list, range base, and longest prefix search. The key mask may be 
used to mask out certain bits of the key value during the comparison. In other words, 
the mask specifies which bits of the key value are not to be compared to the 
corresponding bits of the address entry. 

20 The initial anchor base may be used to access different anchor databases. In 

other words, the initial anchor value and the initial anchor base are both used to access 

a particular anchor database. In one embodiment, the initial anchor base is added to 

the initial anchor value to obtain a starting address group. Likewise, both of the data 

13 
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entry base and the address entry base may be used to specify a particular entry. For 
example, two different address entry bases may be added to a same address entry to 
obtain two different data entries. Likewise, the data entry base may be added to a data 
entry pointer to obtain different data entries with the same data entr>' pointer. 

5 Figure 3 is a diagrammatic representation of an address entry group 210 that 

may be utilized for a linked list search in accordance with one embodiment of the 
present invention. As shown, the address entry group 210 includes a next group UP 
pointer 301, a next group DOWN pointer 303, an entry data pointer 305, address entry 
group control bits 307, and an array of address entries 309. 

10 Each address entry of the array 309 may include a match value, which will be 

compared to the received key, and one or more key control bits. The term "address 
entry" is also used to refer to this match value, excluding any bits of the match value 
that are masked out. The key control bits may be utilized to indicate various custom 
definitions. For example, a key control bit may indicate whether the address entry is 

15 valid. An address entry may be invalid for any number of reasons, e.g., the address 
entry may have been aged out or it may not have been learned. Another key control 
bit may indicate whether a portion of the received key is to be masked out before a 
comparison is performed. Yet another control bit may be used to indicate a specific 
destination for a packet, such as the CPU. By way of a final example, other key 

20 control bits may be used to indicate debugging features like drop or copy. 

At least a portion of the received key is compared to one or more of the 

address entries of a first address entry group. If a match is not found between the key 

and any one of the address entries of the first address group, the key or key portion is 

14 
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then compared to the first address entry (e.g. address entrj' 0) to determine a next 
address group. The next address group is then accessed via the next group UP pointer 
301 or the next group DOWN pointer 303 based on the results of the comparison. 
However, if the key or key portion matches one of the address entries 309, the entry 
5 data for the matching address entry may be accessed via entry data pointer 305. 

The entry data pointer 305 references the entry data that corresponds to the 
first address entry (e.g., address entry 0). The entry data corresponding to the 
remaining addresses entries (e.g. address entries 1-3) immediateh' follows the first 
data entry. That is, the data entries that correspond to a particular address entry array 
10 309 are arranged in the same order as the address entries within the array 309. This is 
done to save memory, otherwise, the address entries and corresponding data entries 
may be arranged in any suitable manner. For example, each address entry may have a 
corresponding entry data pointer. 

The address entry group control bits 307 are optional and may be utilized for 
15 any suitable custom fimction. For example, a control bit may indicate whether to 
discard the received key if it matches the associated address entr>'. The control bits 
may also be used to route the packet to the CPU, irrespective of whether or not a 
match is found for the received key. 

In one embodiment, some options are selected via the above described key 

20 parameters that are received as part of the key. In one embodiment, the key 

parameters include the following programmable fields for the linked list search: 

maximum tree width 4 bits 

maximum group depth 3 bits 

anchor size 1 bit 

15 
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mask on upper bits of initial address value 
data entry size 



14 bits 
2 bits 



Table 2 



The maximum tree depth indicates how many address groups are possible in a link. 
5 The maximum group width indicates how many address entries are within each 
address group. The anchor size indicates the size of the anchor value. For example, 
the anchor may be 16 bits or 32 bits in length. The mask may be utilized to mask out 
particular bits of the first address value such that the masked bits are not used for 
addressing the memory. The data entry size may indicate the size of the data entry. 

10 Other programmable options may also be selectable for the linked list search, 

as well as for the range based and longest prefix searches. For example, the bases of 
the anchor area, address entry area, and data entry area may also be selectable. The 
maximum key size may also be selectable, e.g.. a 1 or 2 memory words. The basis for 
determining whether the next address group is obtained fi-om the UP or DOWN 

15 pointer may also be selectable. In one embodiment, a fiill address entry or portion (or 
some other value) may be used as the UP/DOWN detection basis. 

Figure 4 is a flowchart illustrating a linked list search in accordance with one 
embodiment of the present invention. Initially, an anchor is obtained in operation 
402. The anchor may be obtained in any suitable manner. For example, the anchor 
20 may be obtained by modifying the initial anchor value by the anchor size and base of 
the anchor database 201. In one embodiment, the initial anchor value is divided by 
the anchor size and added to the anchor base to get the anchor address within the 
anchor database 201. Alternatively, a portion of the key (e.g., an unhashed portion) 
may be used as an address or part of an address to get the anchor values within the 
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anchor database 201 . 

An address entry group that corresponds to the anchor is then obtained in 
operation 404. The address entries associated with the current address entry group are 
then searched to find a matching address entry in operation 406. It is then determined 
5 whether there is a match in operation 408. If there is a match, results are output 
indicating the data entry that is associated with the matching address entry in 
operation 410 and the linked list search 106 ends. The results may be in any suitable 
format for indicating the matching data entry. For example, the results may be in the 
form of the corresponding data entry pointer. 

10 If there is no match via operation 408, the key is then compared to the first 

address entry within the current address entry group in operation 412. It is then 
determined whether the key has a higher or lower value then the first entry in 
operation 414. Of course, the key may be compared to any address entry within the 
address entry group. Additionally, the key may be compared to a special comparison 

15 value that is preset specifically for this purpose and does not necessarily correspond to 
a data entry. Generally, in that case the "valid" control bit of the address entry may 
be kept " 0" to indicate that there is not a corresponding data entry. 

If the key has a higher or same value than the first address entry, it is then 

determined whether there is a higher address entry group in operation 422. For 

20 example, it is determined whether the next group UP pointer 301 references a null 

value or a valid value. If there is a null value, results are output indicating that the 

key match has not been found in operation 424, and linked list search ends. If there is 

higher address entry group, the higher address entry group associated with the current 

17 
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address entry group is obtained in operation 420 (e.g., via next group UP pointer 301). 
The address entries associated with the new current address entry group (e.g., the 
newly obtained higher address entry group) are then searched in operation 406. 

However, if it is determined that the key has a lower value than the first 
5 address entry in operation 414, it is then determined whetiier there is a lower address 
entry group in operation 416. That is, it is determined whether the next group DOWN 
pointer 303 points to a valid address group. If there is not valid lower address entry 
group, results are output indicating that a key match has not been found in operation 
424 and the linked list search ends. If there is a valid lower address entry group, the 
10 lower address entry group is obtained in operation 418 and the address entries of the 
lower address entry group are searched in operation 406. 

The search continues until a match is found between a particular address entry 
of a particular address group and the received key. That is, the linked list of address 
groups is traversed through UP and DOWN pointers. After a match is found in 
15 operation 408, the results are output in operation 410. The results indicate the data 
entry associated with the matching address entry. 

Figure 5 is a diagrammatic representation of an alternative address entry group 
21 1 that may be utilized for a range based search in accordance with one embodiment 
of the present invention. Each address entry group 21 1 includes a plurality of policy 
20 entries 501. Each policy entry 501 includes, a data entry pointer 505, and address 
entry group control bits 507. Every other policy entry 501 (even numbers) includes a 
next group UP pointer 502 & a next group DOWN pointer 503. Of course, each 
policy entry include UP and DOWN pointers. These fields (i.e., 501, 502, 503, 505, 
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and 507) function similarly lo the same named fields of the linked list address entry 
group 201 of Figures. 

Additionally, each policy entry 501 includes an address entry 509. Each 
address entry is arranged such that at least a portion of the received key may be 

5 compared to a range of match values. Any suitable arrangement of the address entry 
509 may be implemented for comparing at least a portion of the key to a range of 
match values. For example, the address entr>' may simply provide a base value or 
starting value and a range value for comparison to the entire key. For example, the 
base value may have a value of 5, and the range value may have a value of 2. In this 

10 example, the key must be between the values of 5 and 7. Additionally, a range may 
be integer based as shown m the previous example or mask based. It may be possible 
to choose an integer or mask option on an address entry by address entry (or address 
entry group by address entry group) basis. 

In the illustrated embodiment, the address entry 509 is in the form of a 
15 plurality of base and range sets. As shown, the address entry 509 includes a base of 
the destination IP address and a range of the destination IP address 509b. It may be 
determined whether the destination IP address field of the received key falls within 
the given range value specified by the base and range for the destination IP address 
(e.g., 509a and 509b). Similarly, the address entry 509 includes a base of source IP 
20 address 509c, a range of source IP address 509d, a base of destination or source of the 
L4 address 509e, a range of the destination or source of the L4 address 509f, a base of 
L4 protocol 509g, a range of the L4 protocol 509h, a base of the TOS field 509i, and a 
range of the TOS field 509j. The corresponding fields within the received key may 
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then be checked to determine whether they follow within the indicated range values. 



In one embodiment, some options are selected via above described key 
parameters that are received as part of the key. In one embodiment, the key 
parameters include the following programmable fields for the range based search: 
5 use mitial address (instead of L4) for getting anchor 1 bit 



mask for L4 upper bits (if used) 5 bits 

one deep entry (not full policy) 1 bit 

use source IP for direction 1 bit 

burst transfer count limit 1 2 bits 

10 anchor size 1 bit 



Table 3 

The initial address may be selected as the anchor pointer, instead of the L4 address. 
One or more bits of the L4 source or destination address may be masked if the L4 
source or destination address is used to get the anchor pointer. A one deep entry 

15 policy may also be selected. That is, a single field with a corresponding range may 
constitute the address entry group. The source IP address (as opposed to the 
destination IP address) may be selected as the basis for obtaining the UP or DOWN 
address pointer. The burst transfer count limit may also be selected. For example, the 
total number of memory transfers per burst may be selected in muhiples of the 

20 address entry group's size. The anchor size indicates the size of the anchor value. 

Other options that are described above for the linked list search may also be 
implemented for the range based search, e.g., bases of anchor area, address entry area 
and data entry area, key size, and the width of an address group. In one embodiment, 
the size of the key may be selectable only if a one deep policy is used. 

25 Another type of search algorithm that may be selected is called the longest 
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prefix match search. This type of search may be especially useful within a network 
system. Figure 6 is an illustration of possible communication paths within such a 
network system in accordance with one embodiment of the present invention. As 
shown, a first node 601 may communicate with a second node 605 via path 603. The 
5 second node 605 is coupled to a plurality of hosts 607. The second node 605 is also 
coupled to a third node 61 1 via path 609. The third node is coupled to a plurality of 
hosts 613. The second node 605 may represent, for example, a routing device for a 
plurality of hosts (e.g., hosts 607 and 613) at a particular company site. The third 
node 611 may represent a routing device for a subset of hosts (e.g.. hosts 613) within 
1 0 the particular company site. 

In the illustrated example, data may be routed from the first node 601 to the 
hosts 607 through path 603. Likewise, data may be routed from the first node 601 to 
the hosts 613 via paths 603 and 609. A key may be associated with the data 
indicating whether to route the data to node 605 or node 611. 

15 In one embodiment, N bits of the key may indicate a destination address that 

corresponds to the second node 605, and N+M bits of the key may indicate a 
destination address that corresponds to the third node 611. If the N bits of the key 
match the destination address for the second node 605, the data will be routed to the 
second node 605, However, if the N bits match the destination address of the second 

20 node 605 and the M bits match the destination address of the third node 61 1, the data 
will then be routed to the third node 611. In sum, the second node 611 is the 
destination address only if N+M bits of the received key match. Otherwise, if only N 
bits match, the second node 605 is utilized. 
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Figure 7 is a diagrammatic representation of an alternative address entry group 
210" that may be utilized for a longest prefix search in accordance with one 
embodiment of the present invention. Each address entry group 210" includes a 
plurality of address entries 701. Each address entry 701 includes a next group pointer 
5 702, a data entry pointer 703, a next match record number 705, a next match length 
707, a current match length 709, and a match pattern 711. Each address entry group 
corresponds to a particular set of bits within the key. For example, an address entry 
group may correspond to the first eight bits of the key. Accordingly, the address entry 
group would include at most 256 address entries (i.e., 2^). 

10 The match pattern 71 1 is compared to the corresponding key bits. The current 

match length 709 represents the required number of bits within that key portion that 
must match. For example, although the first eight bits of a key may be compared to 
some address entries within a particular address group, an individual address entry 
may only require that a sub portion of the 8 bits of the key be compared. Preferably, 

15 the address entries 701 within a particular address entry group are arranged from 
highest to lowest valued current match length value 709. In the eight bit example, the 
address entry that require all 8 bits to match is listed first and compared first to the 
corresponding key portion. The address entry that requires the next highest number of 
matching bits (e.g., 7 bits) of the key to match is listed next. The bits required for the 

20 comparison are left justified in one embodiment. 

The next match length 707 indicates the length of the longest match pattern in 
the next address entry group. For example, if the next address entry group is utilized 
to compare the next 7 bits of the key, the next match length is set to 7. The next 
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match record number 705 indicates the number of address enlries within the next 
address entry group. 

In one embodiment, the next match record number 705 is also utilized to 
indicate the type of search that is to be performed on the next address entry group. 

5 When the next match record number 705 is set to zero, a look up type search is 
performed. Otherwise a sequential search is performed. A look up type search may 
be desired when many match patterns are available for a particularly sized slice of the 
key. For example, for an 8 bit comparison, a look up search may be performed when 
there are more than 4 match pattems 711 available. This way sequential search 

10 related delays may be avoided at the cost of more memory. If the next match record 
number 705 is set to zero, it is assumed that the next address entry group contains 2^"''''' 
match length) ^^jj-ggg entrics. lu casc an address entry is found via look up, the current 
match pattern is not used. Instead the current match length decides match or no 
match. For example, a zero value of the current match length indicates a match, while 

15 a non zero indicates no match. 

The entry data pointer 703 references the data entry that corresponds to the 
address entry. If a match is found between the key portion and the match pattern 711, 
the data entry pointer 703 may be utilized to access the corresponding data entry. The 
next group pointer 702 references the next address entry group for comparing other 
20 portions of the key. Thus, if a match is found between the key portion and the match 
pattern 71 1, the next address group pointer 702 may be accessed to obtain the next 
address entry group. 

As described above, some options are selected via the above described key 
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parameters that are received as part of the key. In one embodiment, the key 

parameters include the following programmable fields for the longest prefix search: 

maximum tree width 4 bits 

maximum group depth 3 bits 

5 initial next pattern width 4 bits 

initial record number 4 bits 

width of first slice used 5 bits 

Table 4 

Additionally, any other suitable options may be selectable. For example, widths of 
10 subsequent slices may be programmable. As a result, the number of address entries is 
also definable (as 1 through 2**'" ***** address entries). As described above, the 
comparison method is also programmable at each level of the tree, i.e., look up or 
sequential comparison. 

Figure 8 is a flowchart of a longest prefix search 106' in accordance with one 
15 embodiment of the present invention. Initially, one or more width value(s) for the 
key's one or more key slice(s) are obtained in operation 801. The width value of the 
key slice corresponds to how many bits of the key will be utilized during the 
comparison for a particular address entry group. For example, a first slice width value 
of eight for a first address entry group indicates that eight bits of the key will be 
20 compared to the corresponding field of the address entries of the first address entry 
group. A second width value of seven indicates that seven bits of the key will be 
compared to the corresponding field of the address entries of the second address entry 
group in the search sequence. 

Optionally, the anchor may also be obtained in operation 802. The first 

25 address entry group is then obtained that corresponds to the anchor in operation 803. 
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The address entries associated with the first address entry group are then searched for 
a match between the first key slice and the match patterns of the address entries in 
operation 805. It is then determined whether there is a match in operation 807. If 
there is no match, results are output indicating that the key match has not been found 
5 in operation 809 and the longest prefix search 1 06' ends. 

If there is a match, it is then determined whether there is a next address group 
in operation 810. If there is not a next address entry group, results are output that are 
associated with the associated data entry of this address entry in operation 819. If 
there is a next address entry group, it is obtained in operation 811. The address 

10 entries associated with the next address entry group are then searched for a match 
between the second key slice and the match patterns of the next address entry group in 
operation 813. It is then determined whether there is match in operation 815. If there 
is no match, results are output associated with the last matching address entry in 
operation 819. These results correspond to the address entry that matches the highest 

1 5 number of bits of the key slice. 

If there is a match, it is then determined whether there is next address entry 
group in operation 817. If there is no next address group, the results are output that 
are associated with the last matching address entry in operation 819. If there is a next 
address group, the next address entry group associated with the matching address 
20 entry is then obtained in operation 811. The next prefix search continues until there is 
no match within a particular address entry group or the end of the address entry group 
chain is reached. Results are output that correspond to the data entry associated with 
the last matching address entry. 
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Any suitable combination of hardware and software may utilized to implement 
the search engine of the present invention. Preferably, the search engine algorithms 
are at least in part implemented within hardware so as to maximize search speed. The 
search engine hardware is also configurable to receive variable search parameters or 
5 options, e.g., as described above. 

Referring next to Fig. 9, one embodiment of a search engine 900 for 
implementing the above described processes of Figures 1 through 8 will be described. 
As shown, the search engine 900 includes an input key scheduler 902, two search 
engines 904a and 904b, an entry cache controller 908, an accounting and learning 
10 controller 925, address and data modules 910 and 912, an external memory controller 
914, an aging controller 920, local memory resources 918, an external access port 
916, and an output result scheduler. 

In general terms, a key 901 may be received into the search engine 900 and 
used by the search engine 900 to generate and output an output result 903. The search 

15 engine 900 performs one or more searches based, in part, on the received key. The 
input key scheduler 902 receives a key or key portion 901. The input key scheduler 
902 also checks entry cache control 908 for previously input keys or key portions. 
The entry cache control 908 may contain previously obtained search results for 
previously input keys or key portions. In other words, a key or key portion that is 

20 identical to the current key or key portions may have been previously received by the 
search engine 900 and stored wdthin cache 908, along with associated output results. 

The key or key portion may then be passed to the micro search engine 904a. 

The micro search engine is a micro-code based engine that is configured to control the 
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macro search engine 904b. The macro search engine 904b is arranged to search 
through a plurality of address entries by varying the address signals. At the direction 
of the micro search engine 904a, the macro search engine 904b searches for a 
particular address entry that corresponds to one or more portions of the received key. 
When a corresponding address entry is found, it's associated data entry may be 
retrieved (if one exists for the corresponding address entry) via a data pointer that is 
located with the corresponding address entry. Alternatively, the data entry may be 
directly located with the corresponding address entry without using a data pointer, for 
example. The retrieved data entry may then be used to generate at least a part of the 
output result 903, which is output from the search engine 900 via the output scheduler 
922. 

The micro search engine 904a may be programmed in any suitable manner to 
meet the requirements of the particular application. For example, the micro search 
engine may be programmed vrfth a particular search algorithm. Alternatively, the 
micro search engine 904a may hand the key to the macro search engine 904b so that 
the macro search engine perform the search. The micro search engine 904a may also 
be programmed to complete a search partially performed by the macro search engine. 
The micro search engine is generally responsible for examining the key contents 
and/or database to determine and calculate routing parameters, such as quality of 
service. The micro search engine may also implement other functions, such as 
learning and accounting. In one embodiment, the micro search engine is equipped 
with specialized hardware for performing long string searches. 

The macro search engine 904b is hard wired to provide rapid searches. 
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Although the macro search engine is hard wired, it still flexibly provides for a number 
of programmable search options, as outlined above. Additionally, as described above, 
a particular search algorithm may be selected to be implemented by the macro engine 
and/or micro engine. Also, parameters of the search algorithm may be configured 
(e.g., through received key parameters). For example, a linked list search, range 
based search, and/or longest prefix search may be selected for a given key. For each 
type of search, different database configurations may be implemented, such as 
different anchor databases and/or address entry group databases. For instance, the 
size of the anchor pointer may be configured. Additionally, the width of each address 
entry group {e.g., the number of address entries per group) may also be selected. 

As described above, the received key may include a type and subtype to define 
the search to be performed by the search engine 900. Of course, any number of fields 
may be used to define the search, such as a single field or multiple fields. In this 
embodiment, the type field is used to indicate a type of search algorithm, such as a 
linked list or range based search, and the subtype field indicates which database to 
search. For example, the type and subtype fields may together indicate which 
database to search, and how to search it. Each database is constructed for a particular 
search algorithm. However, since more than one database may be used for each 
search algorithm, the subtype is used to specify the database. 

Address module 910 generates address signals for accessing an external 
memory (not shown). The extemal memory device may contain one or more 
databases that are accessed by the engine 904. Alternatively, there may be more than 
one memory device with each containing one or more databases that are accessible by 
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the engine 904. For example, the address signals can be used to access a specific 
address entry within the database(s). 

The data module 912 may be used to read data {e.g., an address entry or data 
entry) from the database(s). For example, when the engine 904 outputs a specific set 
of address signals to the address module 910 to access a data pointer, the data pointer 
value value is output from one of the database(s) of the memory device to the data 
module 912. The engine 904 may then change the address signals to the address 
module 910 to correspond to the data pointer value and access the data entry from the 
data module 912. 

The data module 912 may also be configured to perform a write to one of the 
databases. The write may be initiated in any number of circumstances. For example, 
a write operation may be performed during a learning function, wherein new entries 
are added to the database(s). By way of another example, a write operation may be 
performed to " age" the data entries. In other words, each time a address entry is 
accessed (or "hit"), it is marked to indicate use. The address entries may then be 
periodically checked for marks, and address entries and associated data pointers and 
data entries that are not used for a predefined period of time may then be purged from 
the database(s). The learning and aging functions are further described below. 

The external memory controller 914 may be used to generate additionally 

required control signals for accessing the memory device. For example, the memory 

signals may include an address strobe and/or chip select signal to enable the memory 

device, a read and write enable signal(s) to enable a read or a write to the memory 

device, and one or more byte enable signals to enable access to specific bytes of data 
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within the database(s). In sum, the external memory controller 914 provides control 
signals to the memory device; the address module 910 provides address signals to the 
address bus of the memory device; and the data module 912 provides data signals to 
the data bus of the memory device and reads data signals from the memory device. 

As described above, the search engine 900 may also include learning 
capabilities for writing new data entries to one or more database(s). The learning 
function may be implemented by the engine 904 itself or by the CPU through an 
external access port block 916. Specifically, the CPU may write a new entry to the 
memory device through the external access port block 916 and data module 912, 

The local memory resources 918 may be used for any suitable storage 
purposes. For example, one or more of the registers may be programmable and used 
to alter search algorithms. Additionally, some of the registers may be used as 
intermediate storage registers to temporarily hold information obtained from the 
database(s). The stored information is released when the engme 904 completes its 
searches for a particular set of keys and then used to create output results 903. These 
resources 918 may also be used as a scratch pad by the micro engine 904a. 

The aging controller 920 may delete inactive address entries and associated 

data pointers and data entries from the database(s). That is, data entries are purged if 

they are not used by the engine 904 to generate the output results after a predefined 

period of time. The aging controller 920 works with the input key scheduler 902 and 

engine 904 to mark data entries within the database(s) that are found using the 

received key. The aging controller 920 includes a timer that is used to periodically 

clear the marks from the data entries. The data entries may then be marked again 
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when accessed by the engine 904, After the predefined time period, the data entries 
are checked to determine whether any entries are obsolete. In other words, if a 
particular data entry has not been marked within the predefined time period, it is 
purged fi-om the data base by the engine 904 via the data module 912. In sum, data 
entries that are not used or accessed for long periods of time may be deleted from the 
database(s). 

Alternatively, the above described marking approach ma\ be replaced by 
implementing an activity count. The aging controller reduces the activity count by 
one at a predefined interval. When the count reaches zero, the aging controller sends 
a "delete key" instruction to the input scheduler, which instruction is then sent to the 
micro engine 904a. The micro engine 904a then deletes the entry. The aging 
controller may also be programmed to inform the CPU of this event (e.g., the activity 
counter has reached zero). The CPU may be informed, for example, via an interrupt, 
instead of generating a "delete key" instruction. 

The output results 903 are output through the output scheduler 922 to a receive 
FIFO, for example. The output scheduler 922 may also include storage capabilities 
for accumulating output results until the receive FIFO is ready to accept the result. 
The output scheduler 922 may also include a timer for determining when to output the 
output results to the receive FIFO. 

The macro search engine 904b may include any suitable combination of 

hardware and software arranged to quickly perform a plurality of at least partly 

preconfigured search algorithms. In one embodiment, the search engine includes a 

plurality of search blocks that are each preconfigured to perform a particular search 
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algorithm. For example, a first search block is preconfigured to perform a linked list 
search, and a second search block is preconfigured to perform a range based search. 
Although the search blocks are partly preconfigured, the search blocks may also 
accept a set of programmable search parameters. The search parameters may indicate 
various programmable features of the search algorithm itself, as well as the type and 
configurations of the data bases that are searched. 

Figure 10 is an example implementation of the macro search engine 904b of 
Figure 9 in accordance with one embodiment of the present invention. As shown, the 
macro search engine 904b includes a key decoder and latch 1001, three key buffers 
103, three search blocks 1005, a memory arbitrator 1009 , and a result output block 
1007. The key and associated key parameters are received into key decoder and latch 
1001 . The key decoder 1001 is arranged to determine where to forward the key and to 
request a specific type of search algorithm for the key. As shown, the key decoder 
1001 may forward the key and key parameters to one of three buffers 1003. A first 
buffer 1003a is coupled with linked list block 1005a; a second buffer 1003b is 
coupled with longest prefix block 1005b; and a third buffer 1003c is coupled with 
range block 1005c. Key decoder 1001 requests either a linked list search fi*om linked 
list block 1005a; a longest prefix search from longest prefix block 1005b; or a range 
based search fi-om range block 1005c. 

Each of the search algorithm blocks (i.e., 1005) is arranged to communicate 
with memory arbitrator 1009. Memory arbitrator 1009 is configured to access an 
external memory interface (e.g., external memory controller 914, address module 910 
and data module 912 of Figure 9). Each search engine algorithm is also arranged to 
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output a search result to result output block 1007. This search result is then passed to 
the micro search engine 904a of Figure 9. 

Figure 1 1 represents state machine implementations of the key decoder and 
latch 1001 of Figure 10 in accordance with one embodiment of the present invention. 
During idle state 1 102 search request signals are set. For example, particular search 
request signals are set based on the key parameters. In one embodiment, if the key 
type indicates that a linked list database is to be used, a channel request for a linked 
list data base is set. 

When a new and valid key is received, an acknowledgement of the key is 
indicated in state 1104. After the key is acknowledged, the state machine 1001 
returns to the idle state 1102. If a new and invalid key is received, an error is 
indicated in state 1106. The state machine is then returns to the idle state 102. 
Invalidity may be determined based on whether the key contents are arranged within 
one of a plurality of patterns. By way of specific example, it may be determined 
whether the received key has the expected key type and subtype parameter values 
(e.g., for the search algorithm that is selected). 

Figure 12 represents state machine implementations of the linked list block 

1005a of Figure 10 in accordance with one embodiment of the present invention. The 

linked list block 1005a includes two state machines, a main state machine 1201 and a 

comparator state machine 1203. The main state machine 1201 generally sets up 

signals for accessing particular address entries of a particular address group and 

requesting a comparison between the key and accessed address entries. The 

comparator is generally responsible for initiating a comparison between the key and 
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accessed address entries. The comparator also loads a next address group if no match 
is found (if a next address group is present). Of course, these tasks may be divided 
between any number of state machines. 

Referring to the main state machine 1201, a set up procedure for the linked list 
5 block occurs in state 1202. This set up procedure may include setting control signals 
based on programmable search parameters. For example, a request64 signal is set 
depending on whether a 64-bit linked list search or a 128-bit linked list search has 
been requested. In the illustrated embodiment, the request64 signal is set based on the 
sub key type described with reference to Table 1. That is, the state machine for the 
10 linked list block 1005a accepts a key that is 64 or 128 bits in length, A transfer count 
signal is also set to the value of the maximum width specified by the key attributes, 
which specifies the maximum number of address entries per address group. A depth 
signal is also decremented to indicate how many address groups have been (or are 
about to be) processed (e.g., compared with the key). An error may be indicated when 
1 5 the number of processed address groups exceeds the specified maximum depth. 

After a request for a linked list search is received from the key decoder 1001, 
signals for accessing memory are then set up in state 1204. For example, a channel 
request signal that is output to the memory arbitrator 1009 is activated (e.g., set to a 
high value) until the memory arbitrator 1009 acknowledges receipt of the channel 
20 request. Additionally, a last request signal that indicates whether the a last block of 
data is being requested from the memory arbitrator 1009 is set. The last request signal 
is utilized in a later state to process the last block of data that is still pending from the 
memory. An address strobe signal is also activated until a memory acknowledgement 
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signal is received from the memory arbitrator 1009. 

After the memory ready signal is activated by the memory arbitrator, the 
signals for loading the anchor are then set in state 1206. After the anchor is loaded, 
signals for accessing the memory (e.g., referenced by the anchor) are then set in state 
5 1208. When the memory is ready, signals for accessing the address entries (e.g., of 
the address group obtained in the previous state) are set and a comparison is requested 
for an address entry and the received key in state 1210, 

Referring to the comparator state machine 1203, comparisons between the 
received key and address entries of the currently loaded address group are initiated 
10 and analyzed. Comparison set up signals are set in state 1218. For example, a signal 
to initiate the loading of pointers to the next address group {e.g., the UP or DOWN 
pointer) is activated. The next address group may be required if no address entries 
match the key within the current address group. 

When a compare is requested, a comparison between the key and the address 
15 entries of the current address group is triggered in state 1220. The transfer count 
(which was initialized to the maximum width value) is decremented as each address 
entry is compared. If there is a match (e.g., between an address entry and key), a 
match found signal is set in state 1222. If there is not a match and the transfer count 
has reached zero, a next address group is then loaded {e.g., through the UP or DOWN 
20 pointer) and it is indicated that the compare is over in state 1224, 

Turning back to the main state machine 1201, if the match found signal is set, 
a search ready signal is activated in state 1212. As a result of a match being found, a 
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result is output. The micro search engine (e.g.. 904a of Figure 9) takes the result that 
is output from the linked list block. The result may include a flag indicating that there 
was a hit. The state machine for the linked list block then returns to idle state 1202. 

If the match found signal is not set, signals are then set for requesting the last 
or only comparison in state 1216. This state may be provided to allow enough lime 
(e.g., clock cycles) for the comparison to finish outputting a result. If a match is 
foimd for the last comparison, a search ready signal is set in state 1212. If a match is 
not found, memory access signals are again set if a next address group is present in 
state 1214. This determination may be based on a null signal. The null signal is set if 
the end of the linked list has been reached. If the null signal is not set, signals for 
accessing the memory (e.g., the next address group) are set in state 1208. If the null 
signal is set, the search ready is set in state 1212 and the search ends. For this case, 
the result output may include a flag indicating a miss. 

Figure 13 represents state machine implementations of the memory arbitrator 
1009 of Figure 10 in accordance with one embodiment of the present invention. In 
state 1302, signals for selecting a memory grant to either the linked list block 1005a, 
the longest prefix block 1005b, or the range block 1005c are preset based on values of 
the channel request signals from the respective blocks 1005. For example, if the 
channel request from the linked list block is set, signals for a linked list grant are set. 

When a longest prefix search channel is requested, a longest prefix grant is 

performed in state 1304. This represents the highest priority grant although other 

priority sequences may be contemplated. When there are no more channel requests 

(longest prefix or otherwise), the state machine 1009 returns to presetting the grant 
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signals in state 1302. 

The second highest priority is the linked list memory grant. As illustrated, 
when there is a linked list request and there is not a longest prefix request, a linked list 
grant is initiated in state 1304. When there are no more requests, the state machine 
5 1 009 returns to state 1 302. 

The lowest priority is the ranged-based grant. When a range request is 
received and there is no linked list request or longest prefix request, a range-based 
grant is initiated in state 1306. When there are no more requests and there is not a last 
range based request, the state machine 1009 returns to state 1302. 

10 From the longest prefix grant state 1304, a linked list grant may be initiated in 

state 1304 when a linked list request is present and no longest prefix request is 
present. The linked list grant state 1304 may also be obtained from the range grant 
state 1306 when there is a linked list request and there is not any longest prefix 
request or range based request. This helps enhance overall performance. 

15 A longest prefix grant state 1304 may be reached firom the linked list grant 

state 1304 when there is a longest prefix request and there is no longer any linked list 
requests. The longest prefix grant state 1304 may also be reached from the range 
grant state 1306 when there is a longest prefix request and there is not a ranged based 
request. 

20 The range based grant state 1306 may be reached fi*om the linked list grant 

date 1304 when there is a range request and no longest prefix request, as well as no 

other linked list request. The range based grant state 1306 may also be reached fi-om 
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the longest prefix state 1304 when there is a range request and there not a longest 
prefix request or linked list request. 

Figures 14A and 14B represent state machine implementations of the range 
block 1005c of Figure 10 in accordance with one embodiment of the present 
invention. The state machine for the range based block 1005c shares many states in 
common with the state machine for the linked list block 1005a, as illustrated in Figure 
12A. Signals for accessing a particular address group are set up in states 1402 
through 1410. State 1416 includes setting signals for requesting a last or only 
compare, and state 1412 sets signals indicating that a search is ready. 

The range based state machines also includes a state 1414 for setting memory 
signals for a next burst. This state configures signals to access one or more multiple 
address group entries during a single memory burst cycle. After the signals for 
accessing address entries and requesting a compare are set up in state 1410, a new 
burst may be set up in state 1414 (if a match has not been found and the burst is over 
but the comparison check is not over). The compare request is also withdrawn when 
leaving state 1410 (as well as when leaving state 1416). If a one deep policy is 
required, a new burst may also be set up in state 1414 after setting up signals for 
accessing an address group in state 1408. After a new burst is set up in state 1414, 
signals for accessing the next address group are then set up in state 1408 if the 
previous match is done and the comparison check is not complete and there was no 
match found. If a match is found or the check is over, a search ready signal is set in 
state 1412. The check is over, for example, when the predefined burst size runs out. 
The burst size may be defined any number of ways, such as by a received key 
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parameter. The burst size is loaded and decremented for each burst. When the burst 
size reaches zero, the check is over. 

Turning to Figure 14B, comparison signals are set up in state 1416. For 
example, a flag to indicate whether the address entry is odd or even is set. When a 
compare is requested, signals are set up to access a 32-byte even address entry in state 
1418. After a comparison is performed on the even address entry, signals are then set 
up to access a 32 byte odd address entry in state 1420 if the compare request is still 
active and a one deep policy is not required. If a 1-deep policy is required {e.g., via 
the received key attributes), the state machine 1005c returns to setting up the 
comparison signals in state 1416. In a 1 deep policy, only a single field of a single 
address entry of each address entry group (e.g., destination IP address range and base) 
is compared to a corresponding part of the key. The state machine 1 005c also returns 
to setting up the comparison signal in state 1416 when the compare request is 
withdrawn. 

In sum, the signals for accessing each 32 byte odd address entry are set up in 
state 1426, and the signals for accessing each 32 byte even address entry are set up in 
state 1418. In the illustrated embodiment, the UP or DOWN pointer to the next 
address pointer is loaded only when an even address entry is accessed since the odd 
address entries do not contain these pointers. 

Figure 15 represents state machine implementations of the longest prefix block 

1005b of Figure 10 in accordance with one embodiment of the present invention. The 

state machine for the longest prefix block 1005b shares many states in common with 

the state machine for the linked list block 1005a, as illustrated in Figure 12. Signals 
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for accessing memory and requesting a comparison are set up in states 1502 through 
1508. State 1504 includes signals for setting up the comparison. For example, a 
depth signal is decremented to indicate how many address groups have or are about to 
be analyzed. State 1510 includes setting signals for requesting a last or only compare, 
and state 1514 includes indicating that a search is ready. 

Comparison set up signals are set in state 1516. For example, a signal to 
initiate the loading of the first address group is activated. When a compare is 
requested, a comparison is triggered in state 1518. If any of the records (e.g., address 
entries) match {e.g., the required part of the match pattern of the address entry and the 
same part of the corresponding key slice), a match foimd signal is set in state 1520. If 
none of the records match, a next address group is then loaded and it is indicated that 
the compare is over in state 1522. 

Traversal from state to state within the longest prefix search state machine 
differs from the linked list state machine. In the linked list case, the search continues 
on a mismatch, while in the longest prefix case, the search continues on a match. 
When a look up is indicated (e.g., via a key attribute or address entry field) during the 
memory access state 1506, signals for requesting the only comparison are set in state 
1510. In other words, a single comparison is performed. When memor}' signals for 
accessing a next record {e.g., next address entry) are being set in state 1512, a null 
may be encoimtered when the end of the address entries is reached. Additionally, the 
end of the key may have been reached. If the end of the key or a null is reached or no 
match is found, the search ready signal is activated in state 1514 and the search then 
waits in the setup state 1502. If the end of the key or null has not been reached, the 
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signals for accessing memory (/.e.. of the next record) are set in state 1506 and the 
comparison continues. 

Comparisons continue for each next record and key slice until the end of the 
key or the end of the records are reached or no match is found. The results are then 
5 output to the micro search engine 904a. The results may indicate the data entry or the 
data pointer of the last matching address entry or indicate that no match was foimd. 
For example, the results may reference a null. The last matching data entry 
corresponds to the address entries that matches the most bits of the key. 

Although the foregoing invention has been described in some detail for 
10 purposes of clarity of understanding, it will be apparent that certain changes and 
modifications may be practiced within the scope of the appended claims. It should be 
noted that there are many alternative ways of implementing both the process and 
apparatus of the present invention. For example, although search algorithms were 
described in the context of network system, some of the search mechanisms may also 
15 be applied to any other type of search application. Accordingly, the present 
embodiments are to be considered as illustrative and not restrictive, and the invention 
is not to be limited to the details given herein, but may be modified within the scope 
and equivalents of the appended claims. 
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CLAIMS 

1. An apparatus for searching through a database (201, 203, 205), the apparatus 
comprising a hard wired search engine (904) arranged to receive the key and a 
programmable search parameter and to search through the data base for an address 
entry corresponding to the received key, the search being aherable by the 
programmable search parameter. 

2. An apparatus as recited in claim 1 further comprising: 

a plurality of hard wired search engines arranged to perform one of a plurality 
of search algorithms for searching through a data base for a key, at least one of the 
search algorithms being alterable by the programmable search parameter; and 

a key decoder arranged to receive the key and the programmable search 
parameter and to selectably output the key to one of the search engines based on the 
programmable search parameter or the key. 

3. An apparatus as recited in claim 1 wherein the hard wired search engine is 
arranged to perform a search selected from a group consisting of a linked list search, a 
range based search, and a longest prefix search. 

4. An apparatus as recited in claim 1 wherein the hard wired search engine is 
operable to search a plurality of data bases each having a plurality of linked address 
groups each having a plurality of address entries and a plurality of data entries that 
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each correspond to a selected address entry, wherein the search engine is arranged to 
sequentially compare a key to the address entries of a current address group and 
obtain a data entry corresponding to the address entry that matches the key, the 
obtained data entry being related to the key, the search engine also being arreinged to 
5 compare the key to the address entries of a next address group when the key does not 
match any of the address entries of the current address group. 

5. An apparatus as recited in claim 4 wherein the search engine is operable to 
search a selected data bases even when the data base has at least some differently 

1 0 sized address entries. 

6. An apparatus as recited in claim 5 wherein the search engine is arranged to 
perform a longest prefix search. 

15 7. An apparatus as recited in claim 4 wherein the search engine is operable to 
search the plurality of data bases even when each data base has a different number of 
address groups. 

8. An apparatus as recited in claim 4 wherein the search engine is operable to 
20 search the plurality of data bases even when each data base has a different number of 

address entries per address group. 

9. An apparatus as recited in claim 4 wherein the plurality of data bases each 

further include a plurality of anchors that each reference a selected one of the address 
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groups and the search engine is operable to obtain a first address group through a 
selected anchor. 



10. An apparatus as recited in claim 9 wherein the anchor corresponds to a portion 
5 of the key. 

11. An apparatus as recited in claim 9 wherein the search engine is operable to 
search the plurality of data bases even when each data base has differently sized 
anchors. 

10 

12. An apparatus as recited in claim 1 1 wherein a first anchor of a first database 
has a size of one memory word and a second anchor of the first data base has a size of 
two memory words, 

15 13. An apparatus as recited in claim 11 wherein the search engine is operable to 
search the plurality of data bases even when each data base has a different number of 
anchors. 

14 An apparatus as recited in claim 11 wherein each of the anchors reference a 
20 selected one of the address groups through an associated anchor pointer and the search 
engine is operable to search the plurality of data bases even when each data base has 
differently sized anchor pointers. 



15. An apparatus as recited in claim 14 wherein a selected anchor pointer is 
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obtained by dividing an initial address value by an anchor size and adding an anchor 
base. 

16. An apparatus as recited in claim 4 wherein the search engine is arranged to 
5 compare a selected one of the address entries of the address group being compared to 

the key to determine whether a lower address group or an upper address group is to be 
compared next to the key when none of the address entries match the key. 

17. An apparatus as recited in claim 16 wherein the search engine is arranged to 
10 perform a linked list search. 

18. An apparatus as recited in claim 4 wherein the search engine is arranged to 
compare a selected one of the address entries of the address group that is not being 
compared to the key to determine whether a lower address group or an upper address 

15 group is to be compared next to the key when none of the address entries match the 
key. 

19. An apparatus as recited in claim 16 wherein the search engine is arranged to 
perform a range based search. 

20 

20. An apparatus as recited in claim 19 wherein the search engine is arranged to 

compare either a first or second one of the address entries of the address group being 

compared to the key to determine whether the lower address group or the upper 

address group is to be compared next to the key when none of the address entries 
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21. An apparatus for searching through a database to compare received keys to a 
plurality of address entries, each address entry having a corresponding data entry, the 
apparatus comprising: 

a first state machine arranged to perform a first search of a first search type; 
a second state machine arranged to perform a second search of a second search 
type; and 

an key decoder arranged to receive a key and a plurality of programmable 
search parameters and to selectably output the key to one of the state machines based 
on the programmable search parameters and/or the received key, 

wherein the search performed by the selected state machine is based at least in 
part on the programmable search parameters. 

22. An apparatus as recited in claim 21 wherein the first search type is selected 
from a group consisting of a linked list search, a ranged based search, and a longest 
prefix search. 

23. An apparatus as recited in claim 22 wherein the second search type is selected 
fi'om a group consisting of a linked list search, a ranged based search, and a longest 
prefix search, wherein the first search type differs from the second search type. 

24. A data base comprising: 

a plurality of linked address groups each having a plurality of address entries; 
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a plurality of anchors that each reference a selected one of the address groups; 

and 

a plurality of data entries that each correspond to a selected address entry, 
wherein when a key matches a selected one of the address entries, a data entry 
5 corresponding to the matched address entry may be obtained, the data entry being 
related to the key. 

25. A data base as recited in claim 24 wherein at least some of the address groups 
are associated with an UP pointer that references an upper address group and a 

1 0 DOWN pointer that references a lower address group. 

26. A data base as recited in claim 25 wherein the at least some of the address 
groups include a first address entry that has a value that if compared to the key 
indicates whether the lower address group or upper address group is to be compared 

15 next to the key. 

27. A data base as recited in claim 24 wherein each address entry has a base value 
and a range value for a plurality of fields. 

20 28. A data base as recited in claim 27 wherein the range value is either an integer 
type or a mask type. 

29. A data base as recited in claim 28 wherein a first address entry has a range 

value of an integer type and a second address entry has a range value of a mask type. 
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30. A data base as recited in claim 24 wherein at least some of the address entries 
include a control field that is indicative of a characteristic of the corresponding 
address entry or its associated data entry. 

5 

31. A data base as recited in claim 30 wherein the control field indicates whether 
the corresponding address entry is valid or present. 

32. A data base as recited in claim 30 wherein the control field indicates whether 
10 particular positions within the key should be masked off before a comparison is 

performed. 

33. A data base as recited in claim 30 wherein the control field indicates 
debugging features. 

15 

34. A data base as recited in claim 33 wherein the debugging features are selected 
firom a group consisting of sending a packet corresponding to the key to a CPU, 
discarding the packet, and copying the packet to the CPU. 

20 35. A data base as recited in claim 24 wherein the data entries corresponding to a 
particular address group are obtainable from a first address entry within the particular 
address group. 



36. A method for searching through an address entry database for one or more 
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portions of a key, wherein the address entry group database includes a plurality of 
address entry groups each having a plurality of address entries, the method 
comprising: 

(a) searching a current address group for a current address entry that matches a 
5 current slice of a key; 

(b) when a current address entry that matches the current slice is not found 
within the current address group, indicating that there is not a match; 

(c) when a current address entry that matches the current slice is found within 
the current address group, searching a next address group associated with the current 

10 address entry of the cunent address group for a next address entry that matches a next 
slice of the key when the next address group is valid; and 

(d) when a next address entry that matches the next slice is not found within 
the next address group after searching the next address group, indicating that there is a 
match corresponding to the current address entry, 

15 wherein the address groups each have an associated current match length 

current indicating how what length of the key must match the corresponding address 
entry, a first address entry having a first current match length that differs from a 
second current match length of a second address entry. 

20 37. A method as recited in claim 36 further comprising when a next address entry 
that matches the next slice is found within the next address group, defining the next 
address group as the first address group, the next address entry as the first address 
entry, and the next slice as the first slice, and repeating operations (c) through (e). 
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38. A method as recited in claim 37 wherein a size of the current slice differs from 
a size of the next slice. 



39. A method as recited in claim 37, wherein the first and second current match 
lengths belong to a same address group. 

40. A method as recited in claim 36 wherein the address entries of each address 
group are arranged in descending order by current match length. 

41. A method as recited in claim 36 wherein a sequential type or a look up type is 
selectable for the searches. 

42. A method as recited in claim 41 wherein a first search type selected from a 
sequential type and a look up type is performed on the current address group and 
another search type selected from a sequential type and a look up type is performed on 
the next address group. 

43. A database configured for a longest prefix search for a received key, 
comprising: 

a plurality of linked address groups each having a plurality of address entries, 
wherein each address entry includes a match pattern that is comparable to a 
corresponding slice of the received key, a current match length that indicates how 
many bits of the corresponding key slice must match the match length, and a next 
group pointer; and 
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a plurality of data entries each associated with one of the address entries. 



44. A database as recited in claim 43 wherein the address entries of each address 
group are arranged in descending order of current match length. 

45. A database as recited in claim 43 wherein each address entry also includes a 
next match length that indicates a length of a longest match pattern within a next 
address group associated with the next group pointer. 

46. A database as recited in claim 43 wherein each address entry also includes a 
next match record number that indicates a type of search that is to be performed on a 
next address group associated with the next group pointer. 
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